Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 553
Alerts This Week
Warning Icon 1 553

SUSE freetype2 Moderate Integer Overflow and Read Issues Vuln 2026-22815-1

suse
Calendar Grey July 27, 2026
Scroller Suse
Update for freetype2 solves two security issues in SUSE Linux Enterprise Server 16.0 and SAP applications. Install now!
SUSE released a security update for freetype2, addressing two vulnerabilities in version 2.14.3 for SUSE Linux Enterprise Server 16.0 and for SAP applications, with installation in...

Summary

## This update for freetype2 fixes the following issues * Update to version 2.14.3 * CVE-2026-23865: Integer overflow in the tt_var_load_item_variation_store function (bsc#1259118). * CVE-2026-50811: out-of-bounds read vulnerabilityin src/truetype/ttgxvar.c in the TT_Get_Var_Design implementation used by FT_Get_Var_Design_Coordinates (bsc#1271045). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1276=1 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1276=1 ## Package List: * SUSE Linux Enterprise Server 16.0 (noarch)

Topics%20covered

Topics Covered

security advisory moderate buffer overflow SuSE integer overflow freetype2

References

* bsc#1252148

* bsc#1259118

* bsc#1271045

Cross-

* CVE-2026-23865

* CVE-2026-50811

CVSS scores:

* CVE-2026-23865 ( SUSE ): 4.6

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

* CVE-2026-23865 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

* CVE-2026-23865 ( NVD ): 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

* CVE-2026-50811 ( SUSE ): 6.8

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

* CVE-2026-50811 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

* CVE-2026-50811 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Affected Products:

* SUSE Linux Enterprise Server 16.0

* SUSE Linux Enterprise Server for SAP applications 16.0

An update that solves two vulnerabilities and has one fix can now be installed.

##

Severity
medium
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:22815-1
Release Date: 2026-07-16T18:48:33Z
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate buffer overflow SuSE integer overflow freetype2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.